Where the rules that you added inside the <Group> elements rather than just
appended to the bottom of the file?
<description> The SSG can be installed by using `yum install
scap-security-guide` as a root user
Use <tt>yum install scap-security-guide</tt> or <pre>yum install
scap-security-guide</pre> here.
Gabe
On Wed, Jun 21, 2017 at 11:05 AM, Bertilla Theodore <
bertillatheodore1(a)gmail.com> wrote:
Yes, I thought so too. But I am not able to figure out what's
wrong.
For one, the following is the exact content added to integrity.xml ( as
per
http://people.redhat.com/jamisonm/scap/SCAP-Workshop-Coursebook-v2.pdf
)
<Rule id="package_scap-security-guide_installed"
severity="high">
<title>Install SCAP security guide</title>
<description> The SSG can be installed by using `yum install
scap-security-guide` as a root user
</description>
<ocil clause="SCAP Security guide is not installed">
<package-check-macro package="scap-security-guide" />
</ocil>
<rational> Bertilla was here to make this new rule
</rational>
<oval id="package_scap-security-guide_installed" />
</Rule>
On 21 June 2017 at 17:54, Shawn Wells <shawn(a)redhat.com> wrote:
>
>
> On 6/21/17 12:44 PM, Bertilla Theodore wrote:
> > I've attached the last part of the make process which has the errors.
> > The new rules that I have added have not been parsed.
>
> > xml:307: parser error : Extra content at the end of the document
> > <Profile id="common">
> > ^
> > /home/security/Documents/MySSG/scap-security-guide/RHEL/6/
> input/profiles/ftp-server.xml:16:
> > parser error : Extra content at the end of the document
> > <Profile id="ftp-server" extends="server">
> > ^
> > /home/security/Documents/MySSG/scap-security-guide/RHEL/6/
> input/xccdf/system/software/integrity.xml:383:
> > parser error : Extra content at the end of the document
> > <Group id="integrity">
> > ^
> > /home/security/Documents/MySSG/scap-security-guide/RHEL/6/
> input/xccdf/services/smb.xml:229:
> > parser error : Extra content at the end of the document
> > <Group id="smb">
>
> I'm guessing there are missing brackets/syntax errors in the content
> added to these files.
>
> > ^
> > [ 0%] Built target generate-internal-rhel6-shorthand.xml
> > [ 0%] [rhel6-content] generating xccdf-unlinked-resolved.xml
> > File
> > '/home/security/Documents/MySSG/scap-security-guide/RHEL/6/
> RHEL/6/xccdf-unlinked-resolved.xml'
> > line 429: Element '{http://checklists.nist.gov/xccdf/1.1}Profile': No
> > match found for key-sequence ['common'] of keyref
> > '{http://checklists.nist.gov/xccdf/1.1}profileExtIdKeyRef'.
> > File
> > '/home/security/Documents/MySSG/scap-security-guide/RHEL/6/
> RHEL/6/xccdf-unlinked-resolved.xml'
> > line 465: Element '{http://checklists.nist.gov/xccdf/1.1}Profile': No
> > match found for key-sequence ['common'] of keyref
> > '{http://checklists.nist.gov/xccdf/1.1}profileExtIdKeyRef'.
> > File
> > '/home/security/Documents/MySSG/scap-security-guide/RHEL/6/
> RHEL/6/xccdf-unlinked-resolved.xml'
> > line 526: Element '{http://checklists.nist.gov/xccdf/1.1}Profile': No
> > match found for key-sequence ['common'] of keyref
> > '{http://checklists.nist.gov/xccdf/1.1}profileExtIdKeyRef'.
> > File
> > '/home/security/Documents/MySSG/scap-security-guide/RHEL/6/
> RHEL/6/xccdf-unlinked-resolved.xml'
> > line 1908: Element '{http://checklists.nist.gov/xccdf/1.1}Profile': No
> > match found for key-sequence ['common'] of keyref
> > '{http://checklists.nist.gov/xccdf/1.1}profileExtIdKeyRef'.
> > OpenSCAP Error: Invalid XCCDF Checklist (1.1) content in
> > /home/security/Documents/MySSG/scap-security-guide/RHEL/6/
> RHEL/6/xccdf-unlinked-resolved.xml.
> > [oscap_so urce.c:319]
> > make[3]: *** [RHEL/6/xccdf-unlinked-resolved.xml] Error 1
> > make[2]: ***
> > [RHEL/6/CMakeFiles/generate-internal-rhel6-xccdf-unlinked-re
> solved.xml.dir/all]
> > Error 2
> > make[1]: *** [RHEL/6/CMakeFiles/rhel6-content.dir/rule] Error 2
> > make: *** [rhel6-content] Error 2
> _______________________________________________
> scap-security-guide mailing list -- scap-security-guide(a)lists.fedo
>
rahosted.org
> To unsubscribe send an email to scap-security-guide-leave@list
>
s.fedorahosted.org
>
_______________________________________________
scap-security-guide mailing list -- scap-security-guide@lists.
fedorahosted.org
To unsubscribe send an email to scap-security-guide-leave@
lists.fedorahosted.org